$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db92aa0c-c3e7-3dc5-bb56-23c32607f84f.roa File: db92aa0c-c3e7-3dc5-bb56-23c32607f84f.roa (raw, json) Hash identifier: rY3/l/wkKbWcxZDh+Nas7MgF4YHoDMeDW0LcwXAKPgA= Subject key identifier: B3:48:64:99:49:CE:78:9E:6C:06:C4:44:86:3B:1F:A4:63:97:AA:47 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B6797DF78329AF121330FED00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db92aa0c-c3e7-3dc5-bb56-23c32607f84f.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 396982 IP address blocks: 35.240.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:df:78:32:9a:f1:21:33:0f:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=c9992e8a-f690-4d48-b00a-d3f44fdd060d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:55:c3:14:da:b1:01:e6:72:cb:70:69:07:29: c1:30:50:9f:ea:da:63:ff:05:fb:66:e2:02:84:5b: b3:ea:bf:8c:09:20:b0:c6:f6:36:41:81:1c:96:8f: 48:da:62:7b:dd:ef:f2:96:64:af:4f:e2:c4:42:fc: fe:f8:a6:b5:62:11:92:80:ff:88:24:a3:bc:72:ef: cc:a3:d2:f1:11:fb:fe:0d:44:50:91:7b:33:d1:54: 3c:27:d3:87:01:c1:20:3a:2d:0c:18:91:b8:65:03: 8d:77:13:d2:9a:30:f5:c5:b4:92:6a:73:91:7c:49: 7f:d8:b3:0d:36:8d:02:a2:00:81:97:35:82:f3:78: 22:cf:f6:b2:7e:75:0a:02:4a:c6:ea:2d:fa:65:4a: 64:34:91:fb:13:99:b5:be:40:3b:ef:44:b8:a2:34: 31:9f:03:3e:63:e6:36:67:d8:b4:62:c5:8b:91:7f: 15:5b:02:dc:b7:1b:74:2a:68:56:ad:71:b9:f8:67: 75:87:50:90:84:f5:ef:9c:ee:1f:d4:40:8f:dd:6e: 37:f2:2f:6d:6c:43:5f:d8:28:8d:e4:cc:14:18:6a: 15:4e:14:2c:48:b5:98:3e:fa:e6:b3:7c:5b:2a:7d: a2:f9:6f:64:cc:68:de:a3:21:c8:df:48:74:90:2a: 69:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:48:64:99:49:CE:78:9E:6C:06:C4:44:86:3B:1F:A4:63:97:AA:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db92aa0c-c3e7-3dc5-bb56-23c32607f84f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.240.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:ee:e4:40:05:81:ca:ab:1f:07:5b:4f:d4:1d:59:65:34:99: 37:f1:c1:79:18:a3:1d:d2:aa:ce:00:53:6e:0e:f4:f7:a5:93: 6b:6c:5e:1f:38:ad:cd:74:8e:60:b3:a4:36:ba:30:4d:fb:e8: 8a:2b:03:d9:55:c3:b9:d4:6a:7f:84:94:9c:2a:66:48:2b:d8: 45:8d:bf:a5:97:81:2f:6e:c1:14:2b:8e:c0:9d:9a:a6:aa:8a: 4c:dc:03:54:81:0c:7e:f5:9e:5e:69:84:4d:ff:2c:90:fc:d6: eb:10:46:8d:04:c3:1e:fe:db:9f:cf:26:84:f0:da:56:12:eb: 37:59:50:57:39:d6:67:dd:57:63:52:d4:ac:a5:94:34:d7:7a: 48:08:c6:0e:92:81:a5:be:3c:0f:39:64:ed:d9:6a:ef:82:ec: 38:06:02:4e:6b:aa:0f:be:4e:05:bd:a3:ff:f5:93:de:74:47: ca:87:19:0f:d3:19:a3:23:1e:33:86:bf:84:d9:53:c4:5f:14: f5:ca:83:98:e8:5b:1f:50:91:fb:fb:09:64:58:9f:6d:01:ff: 47:be:8c:b4:6f:b2:0b:d6:42:0f:38:66:48:c3:f5:e6:c7:e6: 2e:61:ae:f0:64:66:8c:92:48:d8:ae:d5:c0:76:6c:b0:d2:91: 8c:e8:ac:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl994MprxITMP7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk Yzk5OTJlOGEtZjY5MC00ZDQ4LWIwMGEtZDNmNDRmZGQwNjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklXDFNqxAeZyy3BpBynBMFCf6tpj/wX7ZuIC hFuz6r+MCSCwxvY2QYEclo9I2mJ73e/ylmSvT+LEQvz++Ka1YhGSgP+IJKO8cu/M o9LxEfv+DURQkXsz0VQ8J9OHAcEgOi0MGJG4ZQONdxPSmjD1xbSSanORfEl/2LMN No0CogCBlzWC83giz/ayfnUKAkrG6i36ZUpkNJH7E5m1vkA770S4ojQxnwM+Y+Y2 Z9i0YsWLkX8VWwLctxt0KmhWrXG5+Gd1h1CQhPXvnO4f1ECP3W438i9tbENf2CiN 5MwUGGoVThQsSLWYPvrms3xbKn2i+W9kzGjeoyHI30h0kCppCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNIZJlJzniebAbERIY7H6Rjl6pHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGI5MmFhMGMtYzNlNy0z ZGM1LWJiNTYtMjNjMzI2MDdmODRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI/CwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfu5EAFgcqrHwdbT9QdWWU0mTfxwXkYox3Sqs4AU24O9Pelk2tsXh84 rc10jmCzpDa6ME376IorA9lVw7nUan+ElJwqZkgr2EWNv6WXgS9uwRQrjsCdmqaq ikzcA1SBDH71nl5phE3/LJD81usQRo0Ewx7+25/PJoTw2lYS6zdZUFc51mfdV2NS 1KyllDTXekgIxg6SgaW+PA85ZO3Zau+C7DgGAk5rqg++TgW9o//1k950R8qHGQ/T GaMjHjOGv4TZU8RfFPXKg5joWx9Qkfv7CWRYn20B/0e+jLRvsgvWQg84ZkjD9ebH 5i5hrvBkZoySSNiu1cB2bLDSkYzorL8= -----END CERTIFICATE-----Generated at Mon Oct 20 02:00:44 2025 by rpki-client